From 73742f38a422ed419e3aa192de8aa4db59628740 Mon Sep 17 00:00:00 2001
From: Alex Auvolat <alex@adnab.me>
Date: Wed, 9 Feb 2022 22:57:52 +0100
Subject: [PATCH] Firewall rules and netdata monitoring for Garage expansion

---
 cluster/prod/cluster.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cluster/prod/cluster.nix b/cluster/prod/cluster.nix
index ab70c77..5a717df 100644
--- a/cluster/prod/cluster.nix
+++ b/cluster/prod/cluster.nix
@@ -55,4 +55,10 @@
       "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIDdVbA9fEdqSr5UJ77NnoIqDTVp8ca5kHExhZYI4ecBExFJfonJllXMBN9KdC4ukxtY8Ug47PcMOfMaTBZQc+e+KpvDWpkBt15Xpem3RCxmMBES79sLL7LgtAdBXc5mNaCX8EOEVixWKdarjvxRyf6py6the51G5muaiMpoj5fae4ZpRGjhGTPefzc7y7zRWBUUZ8pYHW774BIaK6XT9gn3hyHV+Occjl/UODXvodktk55YtnuPi8adXTYEsHrVVz8AkFhx+cr0U/U8vtQnsTrZG+JmgQLqpXVs0RDw5bE1RefEbMuYNKxutYKUe3L+ZJtDe0M0MqOFI8a4F5TxP5 katchup@konata"
     ];
   };
+
+  # For Garage external communication
+  networking.firewall.allowedTCPPorts = [ 3901 ];
+
+  # Enable netdata monitoring
+  services.netdata.enable = true;
 }